Microsoft Dismantles Global Scam Message Marketplace

We've all likely encountered those irritating scam texts promising a fake parking ticket or a non-existent package delivery. Well, it seems like you might start seeing fewer of them, thanks to a major effort by Microsoft. The tech giant announced that it played a key role in dismantling a global marketplace that was the backbone for scammers sending out these kinds of phishing messages.

In a joint investigation with Japan's National Police Agency, Microsoft managed to trace scam activities back to a specific online marketplace called YAM Store. This marketplace was apparently a hub for distributing phishing kits, specifically mentioning CoGUI and Iron Man, which enabled cybercriminals to launch widespread campaigns.

According to Microsoft's findings, since January 2026, YAM Store, along with the CoGUI and Iron Man phishing kits, collectively facilitated over a billion malicious messages. These messages targeted more than 75,000 organizations globally, with a significant portion, over 750 million messages, specifically aimed at businesses.

This takedown is a crucial step in disrupting the service economy that fuels transnational cybercrime. By targeting the infrastructure that scammers rely on, Microsoft and its partners are making it harder for these malicious actors to operate and reach potential victims. For us, the users, this hopefully means a cleaner inbox and fewer moments of annoyance dealing with fraudulent communications.